Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/Mm7P4NN1LizY87mrDvVgf0sV4xE.roa
File: Mm7P4NN1LizY87mrDvVgf0sV4xE.roa (raw, json)
Hash identifier: 8fSd6WuWfht3YT7qARQRs3uZZdKS4caj6SowEQ9WVZs=
Subject key identifier: 32:6E:CF:E0:D3:75:2E:2C:D8:F3:B9:AB:0E:F5:60:7F:4B:15:E3:11
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 018BA8A1C7D69038ABF88779432D2A890A77
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/Mm7P4NN1LizY87mrDvVgf0sV4xE.roa
Signing time: Tue 07 Nov 2023 07:14:16 +0000
ROA not before: Tue 07 Nov 2023 07:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 37.143.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a8:a1:c7:d6:90:38:ab:f8:87:79:43:2d:2a:89:0a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Nov 7 07:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=326ecfe0d3752e2cd8f3b9ab0ef5607f4b15e311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2d:44:11:5f:ae:11:bc:ef:56:cc:1c:d6:72:
f4:03:00:a9:8a:99:da:2a:a9:78:dd:50:9d:42:04:
d6:ca:c0:9e:e3:22:90:76:bb:9e:46:17:4c:e8:21:
af:72:ee:0c:32:5c:b7:a1:a6:ec:f1:05:b6:f8:30:
39:65:18:8a:86:68:17:b9:e6:df:41:fe:30:fa:1b:
b1:05:04:3c:a6:85:42:38:7a:44:ef:18:45:e3:ac:
23:1e:bb:b5:44:02:63:5c:ea:f5:2c:69:89:88:98:
e8:fd:55:5f:eb:7c:97:73:f3:7b:d5:d0:2d:18:d1:
94:7c:eb:81:28:a1:ad:a5:31:95:02:ce:df:f5:6d:
47:0e:07:67:46:49:a8:0f:01:68:44:2f:1b:c8:26:
af:63:20:da:75:fd:fc:08:6e:06:37:27:fe:c6:de:
c4:b2:ac:74:f9:a2:bd:60:77:2b:ed:1b:75:3a:a5:
6c:c0:e0:0d:13:42:bc:66:71:32:3b:2e:2d:7e:5b:
95:33:34:84:c5:b5:64:37:5b:9d:b7:f9:84:89:28:
ee:e0:4d:3a:06:f5:4d:1b:c6:48:98:fc:4c:57:1b:
e6:50:16:22:75:b1:86:cc:9b:08:aa:8c:8c:a8:f1:
f0:c5:e9:92:e3:21:05:bf:a2:61:27:4e:42:57:45:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6E:CF:E0:D3:75:2E:2C:D8:F3:B9:AB:0E:F5:60:7F:4B:15:E3:11
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/Mm7P4NN1LizY87mrDvVgf0sV4xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.0.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:25:01:53:f9:9a:c8:6f:e1:59:04:6c:0c:13:cd:06:d6:84:
4b:64:63:b1:69:1e:2d:2e:6a:45:c9:d5:bc:76:ed:85:f8:cd:
65:c8:c4:3b:b2:48:aa:af:db:76:e9:b5:21:d8:96:af:13:04:
4c:25:ce:b6:e5:0e:8e:97:20:58:8f:e2:83:a9:8e:88:55:ba:
a7:48:45:1a:c3:63:9c:16:66:8a:13:18:e9:0e:ab:d7:f8:e9:
20:d7:5a:f0:08:7f:5c:0a:12:a7:8b:d8:23:12:e7:eb:02:fd:
73:47:67:67:6c:6e:1e:1b:3d:18:4a:ca:d4:7d:5e:99:36:8d:
80:05:b5:5f:66:28:0c:18:e7:c0:4c:01:de:da:8b:06:2e:11:
1c:d8:22:8d:7c:a7:6a:f7:27:ae:29:50:92:92:5c:d5:4a:8b:
44:ab:16:91:3a:12:2e:94:58:25:68:6a:eb:f3:83:14:4a:2b:
cf:5b:e0:7f:51:7e:a4:fb:e1:63:e2:ae:8f:79:6b:97:25:97:
0e:18:bc:16:c6:15:cd:88:1c:f3:e0:2c:37:8f:50:bd:24:73:
3b:be:2a:46:c5:72:b8:f1:64:85:7f:79:2c:a0:83:1b:91:d8:
c5:4f:92:9a:05:f2:cf:a3:16:a1:9d:f8:7e:50:a9:2a:97:45:
aa:16:42:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:21 2025 by rpki-client